Lucene search
+L

Alibaba Cloud Linux 3 : 0306: tesseract (ALINUX3-SA-2026:0306)

🗓️ 20 Oct 2026 00:00:00Reported by TenableType 
nessus
 nessus
🔗 www.tenable.com👁 3 Views

Heap out-of-bounds write in Tesseract during OCR recognition via a crafted LSTM model.

Related
Refs
Code
#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
#
# The package checks in this plugin were extracted from
# Alibaba Cloud Linux Security Advisory ALINUX3-SA-2026:0306.
##

include('compat.inc');

if (description)
{
  script_id(367776);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/10/20");

  script_cve_id("CVE-2026-73066");

  script_name(english:"Alibaba Cloud Linux 3 : 0306: tesseract (ALINUX3-SA-2026:0306)");

  script_set_attribute(attribute:"synopsis", value:
"The remote Alibaba Cloud Linux host is missing one or more security updates.");
  script_set_attribute(attribute:"description", value:
"The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the
ALINUX3-SA-2026:0306 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2026-73066:
    Tesseract is an open source OCR engine. Prior to 5.5.3, a crafted .traineddata LSTM model component loaded
    through Tesseract's deserializer can cause an unchecked signed integer multiplication in
    Convolve::DeSerialize in src/lstm/convolve.cpp to wrap the convolution output-channel count, undersizing
    the forward-pass output buffer while writes use the unwrapped element count and causing a heap out-of-
    bounds write during OCR recognition. This issue is fixed in version 5.5.3.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version
number.");
  script_set_attribute(attribute:"see_also", value:"http://mirrors.aliyun.com/alinux/3/cve/alinux3-sa-20260306.xml");
  script_set_attribute(attribute:"solution", value:
"Update the affected packages.");
  script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:N/C:N/I:C/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss4_vector", value:"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N");
  script_set_attribute(attribute:"cvss4_threat_vector", value:"CVSS:4.0/E:U");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2026-73066");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");

  script_set_attribute(attribute:"vuln_publication_date", value:"2026/08/11");
  script_set_attribute(attribute:"patch_publication_date", value:"2026/10/19");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/10/20");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:script-arabic");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:script-armenian");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:script-bengali");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:script-canadian_aboriginal");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:script-cherokee");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:script-cyrillic");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:script-devanagari");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:script-ethiopic");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:script-fraktur");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:script-georgian");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:script-greek");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:script-gujarati");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:script-gurmukhi");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:script-hangul");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:script-hangul_vert");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:script-hans");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:script-hans_vert");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:script-hant");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:script-hant_vert");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:script-hebrew");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:script-japanese");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:script-japanese_vert");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:script-kannada");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:script-khmer");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:script-lao");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:script-latin");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:script-malayalam");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:script-myanmar");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:script-oriya");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:script-sinhala");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:script-syriac");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:script-tamil");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:script-telugu");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:script-thaana");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:script-thai");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:script-tibetan");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:script-vietnamese");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-afr");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-amh");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-ara");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-asm");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-aze");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-aze_cyrl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-bel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-ben");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-bod");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-bos");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-bre");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-bul");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-cat");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-ceb");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-ces");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-chi_sim");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-chi_sim_vert");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-chi_tra");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-chi_tra_vert");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-chr");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-cos");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-cym");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-dan");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-dan_frak");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-deu");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-deu_frak");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-div");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-dzo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-ell");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-enm");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-epo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-equ");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-est");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-eus");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-fao");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-fas");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-fil");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-fin");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-fra");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-frk");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-frm");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-fry");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-gla");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-gle");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-glg");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-grc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-guj");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-hat");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-heb");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-hin");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-hrv");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-hun");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-hye");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-iku");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-ind");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-isl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-ita");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-ita_old");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-jav");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-jpn");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-jpn_vert");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-kan");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-kat");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-kat_old");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-kaz");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-khm");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-kir");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-kor");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-kor_vert");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-kur");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-kur_ara");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-lao");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-lat");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-lav");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-lit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-ltz");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-mal");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-mar");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-mkd");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-mlt");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-mon");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-mri");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-msa");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-mya");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-nep");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-nld");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-nor");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-oci");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-ori");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-pan");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-pol");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-por");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-pus");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-que");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-ron");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-rus");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-san");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-sin");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-slk");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-slk_frak");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-slv");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-snd");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-spa");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-spa_old");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-sqi");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-srp");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-srp_latn");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-sun");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-swa");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-swe");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-syr");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-tam");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-tat");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-tel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-tgk");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-tgl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-tha");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-tir");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-ton");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-tur");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-uig");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-ukr");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-urd");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-uzb");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-uzb_cyrl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-vie");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-yid");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-langpack-yor");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:alibabacloud:alibaba_cloud_linux_3:tesseract-osd");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:alibabacloud:alibaba_cloud_linux_3");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Alibaba Cloud Linux Local Security Checks");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info2.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/Alibaba/release", "Host/Alibaba/rpm-list", "Host/cpu");

  exit(0);
}


include('rpm2.inc');

if (!get_kb_item('Host/local_checks_enabled')) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
var os_product = get_kb_item('installed_os/local/SSH/0/product');
if (isnull(os_product) || 'Alibaba Cloud Linux' >!< os_product) audit(AUDIT_OS_NOT, 'Alibaba Cloud Linux');
var os_version = get_kb_item('installed_os/local/SSH/0/version');
if (isnull(os_version)) audit(AUDIT_UNKNOWN_APP_VER, 'Alibaba Cloud Linux');
if (! preg(pattern:"^3([^0-9]|$)", string:os_version)) audit(AUDIT_OS_NOT, 'Alibaba Cloud Linux 3.x', 'Alibaba Cloud Linux ' + os_version);

if (!get_kb_item('Host/Alibaba/rpm-list')) audit(AUDIT_PACKAGE_LIST_MISSING);

var cpu = get_kb_item('Host/cpu');
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ('aarch64' >!< cpu && 'x86_64' >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, 'Alibaba Cloud Linux', cpu);

var constraints = [
  {
    'release': '3',
    'pkgs': [
      {'reference':'script-arabic-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'script-armenian-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'script-bengali-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'script-canadian_aboriginal-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'script-cherokee-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'script-cyrillic-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'script-devanagari-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'script-ethiopic-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'script-fraktur-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'script-georgian-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'script-greek-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'script-gujarati-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'script-gurmukhi-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'script-hangul-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'script-hangul_vert-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'script-hans-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'script-hans_vert-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'script-hant-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'script-hant_vert-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'script-hebrew-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'script-japanese-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'script-japanese_vert-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'script-kannada-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'script-khmer-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'script-lao-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'script-latin-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'script-malayalam-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'script-myanmar-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'script-oriya-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'script-sinhala-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'script-syriac-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'script-tamil-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'script-telugu-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'script-thaana-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'script-thai-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'script-tibetan-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'script-vietnamese-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-4.1.1-3.al8', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-4.1.1-3.al8', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-devel-4.1.1-3.al8', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-devel-4.1.1-3.al8', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-afr-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-amh-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-ara-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-asm-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-aze-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-aze_cyrl-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-bel-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-ben-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-bod-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-bos-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-bre-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-bul-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-cat-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-ceb-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-ces-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-chi_sim-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-chi_sim_vert-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-chi_tra-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-chi_tra_vert-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-chr-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-cos-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-cym-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-dan-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-dan_frak-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-deu-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-deu_frak-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-div-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-dzo-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-ell-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-enm-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-epo-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-equ-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-est-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-eus-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-fao-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-fas-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-fil-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-fin-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-fra-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-frk-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-frm-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-fry-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-gla-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-gle-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-glg-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-grc-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-guj-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-hat-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-heb-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-hin-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-hrv-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-hun-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-hye-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-iku-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-ind-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-isl-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-ita-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-ita_old-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-jav-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-jpn-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-jpn_vert-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-kan-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-kat-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-kat_old-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-kaz-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-khm-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-kir-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-kor-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-kor_vert-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-kur-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-kur_ara-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-lao-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-lat-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-lav-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-lit-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-ltz-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-mal-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-mar-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-mkd-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-mlt-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-mon-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-mri-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-msa-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-mya-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-nep-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-nld-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-nor-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-oci-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-ori-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-pan-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-pol-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-por-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-pus-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-que-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-ron-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-rus-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-san-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-sin-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-slk-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-slk_frak-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-slv-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-snd-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-spa-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-spa_old-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-sqi-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-srp-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-srp_latn-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-sun-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-swa-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-swe-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-syr-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-tam-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-tat-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-tel-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-tgk-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-tgl-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-tha-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-tir-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-ton-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-tur-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-uig-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-ukr-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-urd-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-uzb-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-uzb_cyrl-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-vie-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-yid-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-langpack-yor-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'tesseract-osd-4.1.1-3.al8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'}
    ]
  }
];

var os_release = get_one_kb_item('installed_os/local/SSH/0/release');
var os_sp = get_one_kb_item('Host/*/minor_release');

var flag = 0;
var reference;
var sp;
var _cpu;
var el_string;
var rpm_spec_vers_cmp;
var epoch;
var allowmaj;
var exists_check;
var cves;
foreach var constraint ( constraints ) {
  # Check that the target release is equal to the affected release
  if (!empty_or_null(constraint['release'])){
    if (constraint['release'] != os_release) continue;
  }
  if (!empty_or_null(constraint['sp'])){
    if (constraint['sp'] != os_sp) continue;
  }
  foreach var pkg ( constraint['pkgs'] ) {
    reference = NULL;
    sp = NULL;
    _cpu = NULL;
    el_string = NULL;
    rpm_spec_vers_cmp = NULL;
    epoch = NULL;
    allowmaj = NULL;
    exists_check = NULL;
    cves = NULL;
    if (!empty_or_null(pkg['reference'])) reference = pkg['reference'];
    if (!empty_or_null(pkg['sp'])) sp = pkg['sp'];
    if (!empty_or_null(pkg['cpu'])) _cpu = pkg['cpu'];
    if (!empty_or_null(pkg['el_string'])) el_string = pkg['el_string'];
    if (!empty_or_null(pkg['rpm_spec_vers_cmp'])) rpm_spec_vers_cmp = pkg['rpm_spec_vers_cmp'];
    if (!empty_or_null(pkg['epoch'])) epoch = pkg['epoch'];
    if (!empty_or_null(pkg['allowmaj'])) allowmaj = pkg['allowmaj'];
    if (!empty_or_null(pkg['exists_check'])) exists_check = pkg['exists_check'];
    if (!empty_or_null(pkg['cves'])) cves = pkg['cves'];
    if (reference &&
        ## (no known rpm to check OR known rpm_exists)
        (!exists_check || rpm_exists(rpm:exists_check)) &&
        rpm_check(sp:sp, cpu:_cpu, reference:reference, epoch:epoch, el_string:el_string, rpm_spec_vers_cmp:rpm_spec_vers_cmp, allowmaj:allowmaj, cves:cves)) flag++;
  }
}

if (flag)
{
  security_report_v4(
      port       : 0,
      severity   : SECURITY_WARNING,
      extra      : rpm_report_get()
  );
  exit(0);
}
else
{
  var tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, 'script-arabic / script-armenian / script-bengali / etc');
}

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

20 Oct 2026 00:00Current
6.3Medium risk
Vulners AI Score6.3
CVSS 46.8
EPSS0.00126
SSVC
3